Fix dependabot snapshot repository bug

jdemetra · Oct 12, 2023 · 753f699 · 753f699
1 parent cea3486
commit 753f699
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/pom.xml b/pom.xml
@@ -333,6 +333,7 @@
                                     <version>3.6.0</version>
                                 </requireMavenVersion>
                                 <requireNoRepositories>
+                                    <allowedRepositories>central</allowedRepositories>
                                     <allowSnapshotRepositories>true</allowSnapshotRepositories>
                                 </requireNoRepositories>
                                 <requirePluginVersions/>
@@ -550,7 +551,16 @@
         </profile>
     </profiles>
 
+    <!-- Custom repositories: order matters! -->
+    <!-- Maven Central is enforced at top to prevent dependabot to use snapshots as releases -->
     <repositories>
+        <repository>
+            <id>central</id>
+            <url>https://repo.maven.apache.org/maven2</url>
+            <snapshots>
+                <enabled>false</enabled>
+            </snapshots>
+        </repository>
         <repository>
             <id>jdemetra-snapshots</id>
             <url>https://oss.sonatype.org/content/repositories/snapshots/</url>